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40 User initiates download of (empty) template 
HTML form. On the server, ESS Server 
Module "wraps" the template HTML form 
in a frameset and includes a control frame. 



42 



User fills out template form and clicks "Store" 
button to send form field values and form 
template page to the original application's 

server module and the ESS Server Module. 



HTML form field values are 
merged into template form. 



46 



Merged form is automatically 
reloaded into user's browser. 



50^ 



User clicks "Sign" button 
to digitally sign 
merged HTML form. 



52^ 



T 



Digitally signed form is uploaded 
to web server into ESS Server 
Module's temporary archive. 



54 



ESS Server Module requests application 
developer's response page. Response page 
gets the signed page from the temporary archive 
and stores it in a database or other repository. 
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\| Developer's original application enables user 

to select an HTML form to be filled and signed. 



62^ 

^ User clicks on the selected HTML form. 



The developer's application requests the ESS Server Module's 
URL with the HTML form URL and a response page URL as arguments. 



\| ESS Server Module creates a frameset with a Display frame and 
Control frame on the fly. The control frame contains the user interface 
controls and the <EMBED> tag referencing the ESS plugin and the 
URL for the HTML form to be displayed in the Display frame. 



70^ 



User's browser receives a frameset containing a 
Control (bottom frame) and a Display (top frame). 
The Display frame initially contains a blank HTML page. 



T 



72 ^ As the Control frame is loaded by the browser, the 
ESS plugin is loaded into memory. 



, I 

74 The ESS plugin requests the template HTML form URL specified in the 
plugin's <EMBED> tag. The plugin captures the HTML source locally. 



76 



The plugin causes the local disk template source 
to be displayed in the Display frame. 
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80 



Within the Display frame, 
user enters data into the fields 
of the template form. 



82 



X 



User clicks "Store" button in Control 
frame, invoking Javascript code within 
the Control and Display frames. 



84 



M Javascript within the Control frame requests 
that the ESS plugin upload the template form to 
the web server. The destination URL for the form is 
specified in the ESS plugin <EMBED> tag. 



86 



Javascript within the Display frame causes Display 
frame form fields to be "submitted" to the web server. 
The form fields are sent to the URL 
named in the form's "action" attribute. 



90 



Javascript within the Control frame causes Control 

frame form fields to be "submitted" to the web 
server. The form fields are sent to the URL named 
in the forms "action" attribute. 
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100 



\jThe template form fields are first submitted 
to the original web application's "action" 
CGI script. The fields arrive as a set of 
standard CGI "name=value" pairs. 



102 



\ 



The original application processes 
(or stores) the form fields as defined 
by the original application. 



The original web application calls ESS's field value 
merge API. Those calls merge the form field values 

into the newly uploaded template 
form and produce a merged form file. 



^ 0^ X A unique identifier is appended to the 
new merged form field file name. The ID 
helps subsequent ESS processes 
locate the merged file. 
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The Control frame's (submitted) form invokes 
the ESS Server Module CGI script on the 
server. The script waits until the Display frame's 
field merging operation completes. 



122 



124 



The ESS Server Module generates a 
new control frame page as it's HTTP response 
page. The new control page is then downloaded 
into the client browser's Control frame. 



\jThe Control frame contains a new ESS <EMBED> tag. 
The ESS <EMBED> tag causes a new instance of the 
plugin to be loaded by the browser. (The <EMBED> 
tag also lists the URL of the new merged field form.) 



126 



130 



X 



The plugin downloads the "merged field" 
form to the client's local disk. 



The merged field template form 
is displayed in the client's Display 
frame. The template form 
is now ready for signing. 
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140 



The user reviews the contents 
of the merged template form 
in preparation for signing. 



142 



The user clicks the "Sign" button 
in the Control frame. 



144 



The ESS plugin computes a 
digital signature for the file that 
is displayed In the Display frame. 



1 46 ^ The ESS plugin prepends a text header onto 
the file to be signed. The plugin then appends a 
base 64 encoded digital signature onto the end 
of the file. The header and signature are both 
contained within HTML comment tags. 
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The signed page is transmitted to a URL 
that is defined in the ESS plugin's <EMBED> tag. 

X 

The transmitted "signed" page is temporarily 
archived by ESS Server Module. 



F/G. 9 



ESS Server Module requests the developer's 
application's response URL script provided 
on the original call to the ESS URL. 

i 

The developer's application's response URL server 
script uses ESS API calls to retrieve the temporarily 
stored signed HTML form and puts it in the developer's 
repository of choice. 

T 

The developer's application's response URL server script 
responds to the client with the application's next web page. 
It can be to display the signed page or go to the next step 
in the process or to choose another HTML form to sign. 




162 



164^ 
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170^ 

User initiates download 
of signed HTIVIL form. 



i ~ 

User clicks "Verify" button to verify 
digital signature attached to the 
HTML form. 



I 



A dialog box is displayed that 
reports whether the signature is valid. 
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180 



The user clicks on a URL link 
to load a signed web page frameset 
into the client browser. 




Request the ESS URL server 
module with the signed HTML form 
as an argument. ESS server module 
dynamically creates the frameset 
page and the Control frame page. 



Retrieve the archived frameset 
page, the Control frame page, 
and the signed Display page 
from the client's local disk files. 



190 



192 



The ESS plugin is loaded 
as the Control frame page loads. 
The Control frame page contains 
an ESS <EMBED> tag. 



The ESS plugin retrieves the 
signed page using a URL defined in the 
Control frame's <EMBED> tag. The signed 
page is then displayed in the Display frame. 
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200 ^ 



User clicks on the "Verify" button 
in the Control frame. 



202 ^ 



The electronic signature plugin recalculates 
a digital signature for the Display frame page 
and compares it to the page's signature. 



204.^ 



The plugin reports back whether or not the signature 
is valid. Javascript in the Control frame page then 
displays a dialog box reporting on the signature status. 



206 



An optional "Signature info" button in the Control frame 
allows the user to retrieve various signature information 
fields (e.g., signer's certificate name, date, time, 
size of signed file, signature host, etc.) 
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